Back to Privacy Policy
Third-Party Services
This page supplements the Endor Privacy Notice and is linked from its section 4. It lists the third-party services we use to operate the Endor Services, what each is used for, and what data is shared with them.
Most of these services are Service Providers. They process data only on our instructions, under data processing agreements. Services marked as independent controllers decide how they use data themselves, under their own privacy policies.
Several providers are based in the USA. Section 5 of the Privacy Notice explains how we protect data transferred outside the EEA.
Apple Health and Health Connect are sources of data you choose to connect, not recipients, and are described in section 2 of the Privacy Notice. Our Facebook and Instagram pages are described in section 4.
Payments
Stripe: Stripe processes payments and subscriptions made on our webpages. We never store your payment card details; they go directly to Stripe. Data shared: name, email address, billing details you enter at checkout, transaction details.
RevenueCat: RevenueCat manages in-app purchases and subscriptions. Data shared: account identifier, purchase and subscription events.
Apple App Store (independent controller): if you download the Endor app or make in-app purchases on an iOS device, Apple processes your payment. Apple’s processing is governed by Apple’s Media Services Terms and the Apple Privacy Policy: https://www.apple.com/legal/privacy/
Google Play (independent controller): if you download the Endor app or make in-app purchases on an Android device, Google processes your payment. Google’s processing is governed by the Google Play Terms of Service and the Google Privacy Policy: https://policies.google.com/privacy
Shopify: Shopify runs our online shop, including device orders and devices included in sponsored memberships. Data shared: name, email address, phone number, delivery address and order details.
Vipps MobilePay: Vipps MobilePay processes payments in our online shop. Data shared: name, phone number and transaction details.
Hosting services and error tracking
Fly.io: Fly.io hosts the Endor Services and stores our data. Data shared: the Personal Data we store, including health data.
Sentry: Sentry collects error reports so we can find and fix bugs. Data shared: error reports and diagnostic data, device and app information, and IP address.
Cloudflare: Cloudflare, Inc. provides network, content delivery and storage services for the Endor Services. Data shared: technical data such as IP address, and the Personal Data we store or transmit through it.
AI features
OpenAI: OpenAI is our current AI provider for the AI features in the Endor app, such as the Guide, check-in messages, daily insights, weekly reports, session recommendations, your plan and search. Data shared: the text you write or dictate in AI features, and, where you have given the relevant consents, the user-provided, measured and calculated data, usage data and profile details these features use. We do not send your name, email address or account identifier. Section 3 of the Privacy Notice describes the legal basis.
Analytics, attribution and advertising
The services in this section are used only if you consent, and you can withdraw your consent at any time in our cookie settings or the app’s settings.
Google Analytics: Google Analytics, provided by Google, measures traffic to and use of our Service. Data shared: pages viewed and events, device and browser information, IP address, and cookie and device identifiers. Google also uses this data for its own purposes as an independent controller, including to personalize ads in its advertising network, under the Google Privacy Policy: https://policies.google.com/privacy. Learn more: https://www.google.com/policies/privacy/partners/
Singular: Singular provides campaign attribution and marketing measurement through software development kits (SDKs) on our webpages and in the Endor app. Data shared: campaign attribution data (such as the UTM source, medium and campaign of links you follow to and within our webpages), pages viewed and events completed on our webpages, and the device and install identifiers used to attribute app installs.
Meta Pixel (joint controller): the Meta Pixel on certain webpages and landing pages measures and optimizes our advertising on Facebook and Instagram. Data shared with Meta Platforms Ireland Limited: pages viewed, purchases and other conversion events, browser and device information, IP address and Meta cookie identifiers. We never send health data to Meta. For this collection, Endor and Meta are joint controllers under Article 26 GDPR: Endor is responsible for asking for your consent and informing you about it. Meta’s further use is governed by the Meta Privacy Policy: https://www.facebook.com/privacy/policy, and you can exercise your rights for that processing directly with Meta.
Scheduling
Acuity Scheduling: Acuity Scheduling, provided by Squarespace, Inc., handles bookings of one-to-one calls. Data shared: name, email address and appointment details.
Internal communications and notifications
Slack: Slack, provided by Slack Technologies, LLC, is our internal messaging service. We receive operational notifications in Slack about accounts, subscriptions and purchases, such as when a purchase is made, a membership is cancelled or an account deletion is requested. Data shared: email address and account ID.
Push notifications
Pushwoosh: Pushwoosh, provided by Pushwoosh Inc., delivers welcome pop-ups in the Endor app and sends automated emails, including invitations to sponsored memberships. Data shared: push token and device identifiers, email address, the app events that trigger a message, and, for invitations, the work email your employer provides and your employer’s name.
Firebase Cloud Messaging: Firebase Cloud Messaging, provided by Google, delivers push notifications on Android devices. Data shared: notification content and the device identifiers needed for delivery. Learn more: https://firebase.google.com/support/privacy
Push notifications never contain health data.
Weather and environment
Open-Meteo: Open-Meteo provides weather and air-quality data for features related to your environment and well-being. Data shared: a coarsened, approximate location, generalized to a wider area, and the relevant hour. We never send your name, email address, user identifier or precise location. Data is encrypted in transit.
Endor for Work
Slack app in your employer’s workspace: if your employer sponsors your membership and installs the Endor Slack app, Endor posts quotes, challenges, pulse survey links and response counts to a channel your employer chooses. Slack is your employer’s own service, used under your employer’s agreement with Slack. Endor never sends messages about individuals through it. Section 4 of the Privacy Notice describes what your employer receives.
Changes to this list
We update this page when we add, change or remove a service. Where a change materially affects how your Personal Data is shared, we will notify you in accordance with section 8 of the Privacy Notice.
11 November 2026: Aligned with the new Privacy Notice, added Shopify, Vipps MobilePay, our AI provider, the Meta Pixel and Endor for Work, and updated Pushwoosh.
14 October 2026: Initial publication.
If you have questions about any service listed here, contact us at human@endor.global.